• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Protection

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 General ] >> General >> Protection Page: [1]
Login
Message << Older Topic   Newer Topic >>
Protection - 1.Apr.2007 3:55:28 AM   
create_share

 

Posts: 269
Joined: 4.May2005
Status: offline
what is the best configuration to protect your ISA Server. Is there any document on this?

Moreover, what port should be used for http. If i open only port 8080, will it effect the performance if i have almost 40 users.

Thankx!
Post #: 1
RE: Protection - 1.Apr.2007 4:16:12 AM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
open http from where to where ??

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to create_share)
Post #: 2
RE: Protection - 1.Apr.2007 8:55:18 AM   
create_share

 

Posts: 269
Joined: 4.May2005
Status: offline
From Internal to External.

(in reply to create_share)
Post #: 3
RE: Protection - 1.Apr.2007 6:22:44 PM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
quote:

what is the best configuration to protect your ISA Server. Is there any document on this?


  1. To Protect your ISA, never create so opened rules between your ISA Server ( Localhost ) & Your other Networks.
  2. Shutdown unnessecary services.
  3. take a look at the system policy, disable any policy that you do not need.


quote:

  Moreover, what port should be used for http. If i open only port 8080, will it effect the performance if i have almost 40 users.


There are a quite few built in protocols that you can use in your Firewall policies.
you dont need to create a new HTTP protocol.

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to create_share)
Post #: 4
RE: Protection - 4.Apr.2007 5:29:59 AM   
create_share

 

Posts: 269
Joined: 4.May2005
Status: offline
My isp offers only dynamic ip only. I need my External NIC on isa 2004 to get dynamic ip from my isp. My ISA 2004 is also a dhcp server for my internal network. I don't have an internal DNS Server and my ISA is not a caching only DNS Server that's why i am using my ISA DHCP DNS option to offer my DHCP Clients the DNS Server Address of my ISP's DNS Server.


What should i enter in the ISA Server's DHCP Option under System Policy so that my ISA's External NIC can get dynamic ip from my isp. Should i remove internal and enter external under the FROM field of DHCP.


Thankx!

(in reply to create_share)
Post #: 5
RE: Protection - 4.Apr.2007 5:40:41 AM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
and why not install DNS on any server in your LAN or in the extreme case, install it on the ISA Server itself, as u install DHCP !!!!

for your external NIC, check this : http://forums.isaserver.org/m_2002017328/mpage_1/key_/tm.htm#2002017328

 i see you participated in that thread !!!


HTH,
Tarek

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to create_share)
Post #: 6

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 General ] >> General >> Protection Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts